Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: HjN3/bmGSADj13BoM5beGhyRllL5cnwr7xz3iL9O2FA=
Subject key identifier: A0:B2:78:EC:A6:D9:7D:1C:D2:46:62:B7:F8:1C:2E:DB:6B:5E:23:2D
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019A50E35FDDDD235A4D357F6ADCFF70E76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 112F
Signing time: Tue 04 Nov 2025 22:01:09 +0000
Manifest this update: Tue 04 Nov 2025 22:01:09 +0000
Manifest next update: Wed 05 Nov 2025 22:01:09 +0000
Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: ydmH3a8TF8bTyEnO3MOOlBIXE78wIJA4JxRmc+ilStI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:5f:dd:dd:23:5a:4d:35:7f:6a:dc:ff:70:e7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Nov 4 22:01:09 2025 GMT
Not After : Nov 5 22:01:09 2025 GMT
Subject: CN=a0b278eca6d97d1cd24662b7f81c2edb6b5e232d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:96:0b:62:c2:49:cc:4e:58:51:6f:6d:90:d9:
2e:b6:fc:0d:10:0a:e3:8b:c9:96:4a:38:11:99:5d:
f9:42:b4:11:c7:e5:f0:2e:e5:62:0a:55:9f:f9:91:
68:d3:c1:8f:14:85:9b:cb:cb:71:1a:33:ab:9e:88:
a4:c4:2c:01:0c:4f:f7:35:2c:a4:cd:3f:97:4d:db:
6f:aa:61:49:94:f9:16:b9:b0:e7:0f:6f:c4:19:5e:
a7:b1:65:42:0a:97:84:3a:0f:e3:96:ed:0b:86:46:
4a:8b:f5:22:58:5b:90:f7:9e:b0:25:47:01:18:5e:
0f:29:ca:eb:f7:1e:2c:aa:96:52:e8:84:a8:b0:96:
c2:6f:50:8e:6d:d1:2f:14:e5:02:91:3c:c1:7a:6c:
56:92:84:5f:f2:12:8a:a0:f2:40:8a:f6:4e:f1:f3:
d8:25:76:d4:16:f1:fc:f7:6c:27:ba:63:a0:b6:e2:
77:31:dc:8f:e1:d5:ff:df:a5:31:c6:58:73:52:5c:
8c:f3:a8:04:54:e5:9a:e5:9a:2f:37:f3:ff:7b:03:
46:c9:16:f3:65:d9:00:bd:0d:fa:6e:74:f6:3e:5e:
8f:73:bf:61:d5:d9:7f:f4:b1:cc:8c:e8:f0:4c:b9:
0a:60:ad:c4:ed:e3:f1:ad:36:df:3d:f6:da:49:35:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:78:EC:A6:D9:7D:1C:D2:46:62:B7:F8:1C:2E:DB:6B:5E:23:2D
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ee:8d:e9:5a:e1:d7:90:a7:b4:9e:ea:44:21:b4:18:a2:e5:
9e:f5:6e:dd:b9:5a:08:8c:10:f6:5d:85:1f:10:f4:ec:b5:e5:
8c:7f:25:63:30:c0:8d:6b:92:09:f7:71:26:e1:45:b3:75:41:
95:45:bc:a4:e0:58:91:4a:7e:1b:8b:d7:53:30:71:5c:5e:ec:
d5:bb:43:d8:fe:6e:13:f2:ab:a3:96:c9:2e:73:dd:ad:d1:8b:
11:c3:3b:54:15:b6:25:cd:9a:5b:a5:79:4c:a9:d9:36:18:53:
5a:27:89:22:00:c1:17:38:fe:4e:07:43:f0:72:89:82:89:3f:
ea:f4:b5:c6:5b:5f:34:7c:31:d5:52:89:94:b4:d8:ed:26:10:
3d:57:af:8c:8c:8f:db:9b:f1:cb:7c:4d:55:79:2d:30:96:95:
ca:f4:88:63:13:cd:e3:20:d1:90:fa:62:f3:fd:ac:55:70:f4:
05:b1:86:8d:dd:a3:dd:eb:91:d1:08:1d:16:d1:b4:5a:3f:ba:
07:27:39:35:25:16:92:c2:2b:8b:38:73:a0:82:5f:5f:1e:85:
0a:51:11:a0:0a:9b:12:30:ab:13:0c:fe:bc:2b:05:05:0a:74:
9e:49:94:27:b7:bc:d3:17:4d:68:d0:67:28:ef:75:35:00:94:
39:18:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:38 2025 by rpki-client